hard20 pts · first answer countsdevsecopssupply-chainci-cd

Installing a CLI with curl | bash

A pipeline step installs a tool with `curl -sL https://get.example.dev | bash`, fetching the latest version each run. What is the safer pattern?

A.Add -k to curl so TLS errors do not stop the buildB.Run the same command but only on main branch buildsC.Download a pinned version and check its checksum or signatureD.Cache the script output so it runs only once a week

Discussion 0

Join free to post in the discussion.

Installing a CLI with curl | bash

Discussion 0

Related questions